| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:compact-columns | < 1.12 | 1.12 |
| compact columns | ≤ 1.11 |
Compact Columns Plugin 1.11 and earlier displays the unprocessed job description in tooltips.
This results in a stored cross-site scripting vulnerability that can be exploited by users with Job/Configure permission.
Compact Columns Plugin 1.12 applies the configured markup formatter to the job description shown in tooltips.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free